Permanent keys get found
Long-lived admin passwords and server keys sit in scripts, laptops and chat history waiting to leak.
DaVaultPrivileged access management with zero standing access.
Standing keys get found.
Admin passwords and server keys live for years in scripts, laptops and chat threads, waiting for the wrong person to find them.
Standing keys get found.
Admin passwords and server keys live for years in scripts, laptops and chat threads, waiting for the wrong person to find them.
Access only for the job.
Ask for one system for a set time. DaVault issues a pass that expires on its own, and the secret behind it stays hidden.
A person says yes.
Approvers decide from the console or their phone. An agent can ask, but it can never approve its own request.
Every session on tape.
Browser sessions run through DaVault and are recorded, so reviewers can replay what happened and who did it. Recording is in testing.
Enterprise product · DaVault
Privileged access management with zero standing access.
DaVault holds the keys to your most sensitive systems so that nobody has to. Access is requested, approved, time-limited and recorded, for people and agents alike.
In use at R92 today; recorded browser sessions are in testing
The problem
No one knows who logged in
Shared admin accounts make it impossible to say which person, or which agent, made a change.
Audits mean a scramble
Proving who had access to what, and why, usually means piecing together logs after the fact.
What it does
Access requests and approvals
Ask for access to one system for a set time; approvers decide from the console or their phone.
Short-lived server logins
One-time certificates for Linux servers that expire in minutes, so there is no long-lived key to steal.
Brokered, recorded sessions
Browser sessions run through DaVault and are recorded, so reviewers can see what happened. In testing; not yet in production.
Secrets stay hidden
Credentials are enrolled once and used on the person’s behalf; agents never see the raw secret.
Console and interface parity
Operator tasks work in both the console and the programming interface, including for agents.
Works with
IdenX
Sign-in, step-up and phone approvals.
Nexus
Imports the machines Nexus manages, so access follows the real fleet.